# CANONICAL-BUILD-LAW-v1.md

LOCKED: 2026-06-29

This file is the public, commit-readable law for the current KELLY / Causalea build era. It summarizes the internal `docs/CANONICAL_BUILD_LAW.md` authority in public language and is safe to link from Causalea, Glass Lab, Helper, Superforecasting, and Markets Lab.

No secret values belong in this file.

## Live Public Milestone

- `www.causalea.com` is a live public product surface for KELLY / Causalea.
- Ask KELLY, Superforecasting, Markets Lab, and Glass Lab are inspection and interaction windows.
- Public users may ask questions, inspect proof, view replay, and compare forecasts.
- Public users may not directly write KELLY ground truth, mutate GraphState, alter the Event Ledger, bypass governed adapters, or change provider configuration.
- External intelligence claims are removed from public copy. The system may be described as governed, proof-visible, reality-fed, self-directed inside bounded runtime lanes, and read-only from public surfaces.

## Current Memory Status

- First visible governed canary cell: `mcell_p58_bfaec131d529f551`
- Public proof map status: source, proof, settlement, calibration, replay, and memory eligibility must be visible or explicitly marked unavailable.
- Canary integrity and replay closure are release-gate checks. A public UI counter is not authority unless the release gate can verify the corresponding receipt.
- Expansion remains governed. Additional cells and candidates must preserve lineage, replay receipts, quarantine readiness, and public no-write boundaries.

## Fifteen Core Laws

1. Truth locks before expansion.
2. Schema truth has one source of authority.
3. Adapters must report real failure; fake success is forbidden.
4. Durable or forecastable answers require proof receipts.
5. Settlement precedes calibration.
6. Replay precedes reuse.
7. Memory Court or equivalent governed authority precedes memory effect.
8. Public users cannot write ground truth.
9. GraphState mutation is last, bounded, and never a public click path.
10. Durable state changes flow only through governed adapters.
11. Data enters with provenance, license posture, freshness, authority level, and fuel eligibility.
12. Answers remain bounded by evidence and claim boundaries.
13. Contradictions, drift, poison risk, and stale evidence require quarantine or repair.
14. Public UI exposes proof and uncertainty; it is not hidden authority.
15. Release gate is the build-era authority for claims, readiness, and public language.

## Bootstrap Seed Checkpoints

Every durable memory cell that is used as authority must have:

1. Approved source or approved data API.
2. Observation or input record.
3. Proof receipt.
4. Settlement record when the claim is reality-closed.
5. Calibration record when a forecast is scored.
6. Replay receipt that reconstructs the chain.
7. Memory Court, governed adapter, or equivalent authority receipt.
8. Post-write readback.
9. Rollback or quarantine readiness.
10. Public no-write boundary preserved.
11. Release-gate verification.

## Public Boundary

Allowed public claim:

KELLY / Causalea is a governed, proof-visible decision and forecasting system. It shows evidence, uncertainty, replay, calibration, and bounded memory status through public read-only windows.

Forbidden public claims:

- Forbidden claim: KELLY is AGI.
- KELLY is conscious.
- KELLY has literal life or biological status.
- Public users can write KELLY ground truth.
- Every memory cell is globally replay-safe unless the release gate verifies that exact claim.
- UI counters alone prove durable memory.

## Platform Roles

| Platform | Authorized role | Forbidden role |
| --- | --- | --- |
| Railway | Ground-truth runtime body and API authority. | Bypassing release gate or accepting ungoverned writes. |
| Neon/Postgres | Durable memory substrate through governed adapters. | Direct public UI writes or hidden mutation authority. |
| Modal | Heavy compute, replay simulation, calibration scoring, and shadow tests. | Durable state authority or direct DB mutation. |
| Cloudflare | Public edge, static assets, signed proof archive, and cache. | Hidden mutation endpoint. |
| Vercel | Static inspection and preview surface. | Durable-state mutation or secret-bearing runtime authority. |
| Sentry | Health and invariant watchdog. | General sensitive-value logging. |
| GitHub | Source control, review, release authority, and workflow enforcement. | Treating deploy targets as independent truth authorities. |

## Verification Matrix

The current public build must remain verifiable by:

- `npm run release:gate -- --read-only`
- `npm run test:public-runtime-surface`
- `npm run test:public-proof-map`
- `npm run test:canary-cell-integrity`
- `npm run test:canary-cell-replay-closure`
- `npm run test:library-integration-runtime`
- `npm run test:library-integration-surface`

## Public Site Rule

Every public surface must link to this file or to a page that links to this file. Any public copy that implies AGI, literal life, consciousness, public ground-truth writes, or unrestricted self-modification is a release-gate failure.